GrapheneOS

https://grapheneos.org
Admin
GrapheneOS is a privacy and security focused mobile operating system with Android app compatibility,...
Tokens:43,341
Snippets:728
Trust Score:10
Update:2 months ago
Show doc for...
Tokens:
Raw
### Install and configure platform-tools

Source: https://grapheneos.org/build

Install platform-tools and add them to the system PATH.

```bash
sdkmanager platform-tools
```

```bash
export PATH="$HOME/android/sdk/platform-tools:$PATH"
```

--------------------------------

### Install and configure NDK

Source: https://grapheneos.org/build

Install the NDK for native code development and add it to the system PATH.

```bash
sdkmanager 'ndk;29.0.14206865'
```

```bash
export PATH="$HOME/android/sdk/ndk/27.2.12479018:$PATH"
```

--------------------------------

### Set up minimal SDK installation

Source: https://grapheneos.org/build

Commands to download, verify, and install the Android command-line tools into a local directory.

```bash
mkdir -p ~/android/sdk/bootstrap
cd ~/android/sdk/bootstrap
curl -O https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip
echo '2d2d50857e4eb553af5a6dc3ad507a17adf43d115264b1afc116f95c92e5e258  commandlinetools-linux-11076708_latest.zip' | sha256sum -c
unzip commandlinetools-linux-11076708_latest.zip
cmdline-tools/bin/sdkmanager 'cmdline-tools;latest' --sdk_root=$HOME/android/sdk
cd ..
rm -r bootstrap
```

--------------------------------

### Install and configure build-tools

Source: https://grapheneos.org/build

Install specific build-tools for CTS and add them to the system PATH.

```bash
sdkmanager 'build-tools;36.0.0'
```

```bash
export PATH="$HOME/android/sdk/build-tools/36.0.0:$PATH"
```

--------------------------------

### Execute flash-all script

Source: https://grapheneos.org/install/cli

Run the flashing script to install the OS and firmware. Ensure the device is not interrupted during this process.

```bash
bash flash-all.sh
```

```batch
./flash-all.bat
```

--------------------------------

### Release directory structure

Source: https://grapheneos.org/build

Example of the expected directory layout for release artifacts.

```text
releases
├── 2025110600
│   └── release-tegu-2025110600
└── 2025110800
    └── release-tegu-2025110800
```

--------------------------------

### Install OpenSSH on Debian and Ubuntu

Source: https://grapheneos.org/install/cli

Use the apt package manager to install the OpenSSH client on Debian or Ubuntu systems.

```bash
sudo apt install openssh-client
```

--------------------------------

### Install Android Studio on Linux

Source: https://grapheneos.org/build

Commands to download, verify, and extract the Android Studio tarball.

```bash
cd ~/android
curl -O https://dl.google.com/dl/android/studio/ide-zips/2025.3.2.6/android-studio-panda2-linux.tar.gz
echo '32942d8cd7688192cf3cd07bf282fb120035b9bd9b56e6f13c5540e6d39807e9 android-studio-panda2-linux.tar.gz' | sha256sum -c
tar xvf android-studio-panda2-linux.tar.gz
rm android-studio-panda2-linux.tar.gz
mv android-studio studio
```

--------------------------------

### Install android-tools on Arch Linux

Source: https://grapheneos.org/install/cli

Installs the android-tools package using the pacman package manager.

```bash
sudo pacman -S android-tools
```

--------------------------------

### Install android-udev rules

Source: https://grapheneos.org/install/cli

Install udev rules to allow non-root access to USB devices on Linux distributions.

```bash
sudo pacman -S android-udev
```

```bash
sudo apt install android-sdk-platform-tools-common
```

--------------------------------

### Install build dependencies on Debian

Source: https://grapheneos.org/build

Install the required packages for building GrapheneOS on Debian bookworm.

```bash
apt install repo yarnpkg zip rsync
```

--------------------------------

### Execute build process

Source: https://grapheneos.org/build

Commands to initiate the build process for different device targets.

```bash
m target-files-package
```

```bash
m vendorbootimage target-files-package
```

```bash
m vendorbootimage vendorkernelbootimage target-files-package
```

--------------------------------

### Install OpenSSH on Arch Linux

Source: https://grapheneos.org/install/cli

Use the pacman package manager to install OpenSSH on Arch-based systems.

```bash
sudo pacman -S openssh
```

--------------------------------

### Setting Up Build Environment

Source: https://grapheneos.org/build

Configures the shell environment for building, requiring bash or zsh.

```bash
source build/envsetup.sh
```

--------------------------------

### Build Components

Source: https://grapheneos.org/build

Compiles the WebView and browser components using autoninja.

```bash
chrt -b 0 autoninja -C out/Default/ trichrome_webview_64_32_apk trichrome_chrome_64_32_apk trichrome_library_64_32_apk vanadium_config_apk
```

--------------------------------

### Update SDK

Source: https://grapheneos.org/build

Update the installed SDK components.

```bash
sdkmanager --update
```

--------------------------------

### Configure Build Arguments

Source: https://grapheneos.org/build

Opens the GN configuration editor for the build directory.

```bash
gn args out/Default
```

--------------------------------

### Syncing a Stable Release

Source: https://grapheneos.org/build

Initializes the source tree for a specific stable release tag.

```bash
mkdir grapheneos-TAG_NAME
cd grapheneos-TAG_NAME
repo init -u https://github.com/GrapheneOS/platform_manifest.git -b refs/tags/TAG_NAME
```

--------------------------------

### Verify fastboot version

Source: https://grapheneos.org/install/cli

Check the installed version of fastboot to ensure the platform-tools are correctly configured.

```text
fastboot version 35.0.2-12147458
Installed as /home/username/platform-tools/fastboot
```

--------------------------------

### Sync to Stable Release

Source: https://grapheneos.org/build

Checks out a specific stable release tag for the build.

```bash
cd src
git fetch --tags
git checkout VERSION
```

--------------------------------

### Extracting Vendor Files for Pixel

Source: https://grapheneos.org/build

Installs dependencies and generates vendor files for specific Pixel devices.

```bash
yarn --cwd vendor/adevtool/ install
```

```bash
adevtool generate-all -d PIXEL_CODENAME
```

--------------------------------

### Add Android Studio to PATH

Source: https://grapheneos.org/build

Export the Android Studio bin directory to the system PATH environment variable.

```bash
export PATH="$PATH:$HOME/android/studio/bin"
```

--------------------------------

### Configure temporary directory for flashing

Source: https://grapheneos.org/install/cli

Use a custom temporary directory if the default /tmp location lacks sufficient space on Linux.

```bash
mkdir tmp && TMPDIR="$PWD/tmp" ./flash-all.sh
```

--------------------------------

### Select build target

Source: https://grapheneos.org/build

Sets the build target for the specified device, such as 'husky' for Pixel 8 Pro.

```bash
lunch husky-cur-user
```

--------------------------------

### Sync Emulator Kernel Sources

Source: https://grapheneos.org/build

Initializes and syncs the 6.12 kernel manifest for the emulator.

```bash
mkdir -p android/kernel/6.12
cd android/kernel/6.12
repo init -u https://github.com/GrapheneOS/kernel_manifest-6.12.git -b 17
repo sync -j8
```

--------------------------------

### Update Emulator Prebuilts

Source: https://grapheneos.org/build

Replaces the existing prebuilts in the OS source tree with the newly built ones.

```bash
ANDROID_BUILD_TOP=~/android/grapheneos-17 ARCH=x86_64 common/update_virt_prebuilts.sh
```

--------------------------------

### Generate Signing Key

Source: https://grapheneos.org/build

Creates a PKCS12 keystore for signing the Vanadium release.

```bash
keytool -genkey -v -keystore vanadium.keystore -storetype pkcs12 -alias vanadium -keyalg RSA -keysize 4096 -sigalg SHA512withRSA -validity 10000 -dname "cn=GrapheneOS"
```

--------------------------------

### Clone Vanadium Repository

Source: https://grapheneos.org/build

Initializes the local repository for the Vanadium build.

```bash
git clone https://github.com/GrapheneOS/Vanadium.git
cd Vanadium
git checkout CORRECT_BRANCH_OR_TAG
```

--------------------------------

### Syncing the Development Branch

Source: https://grapheneos.org/build

Initializes and syncs the Android 17 development branch for GrapheneOS.

```bash
mkdir grapheneos-17
cd grapheneos-17
repo init -u https://github.com/GrapheneOS/platform_manifest.git -b 17
repo sync -j8
```

--------------------------------

### Sync Submodules and Dependencies

Source: https://grapheneos.org/build

Downloads build dependencies and submodules required for the build.

```bash
gclient sync -D --with_branch_heads --with_tags --jobs 32
```

--------------------------------

### Build default target

Source: https://grapheneos.org/build

Initiates a faster build process for development devices with no security requirements.

```bash
m
```
Tokens:
Raw